Spam requests
Unpaid requests should be cheap. Your API can return HTTP 402 without running the expensive model, tool call, search, or workflow. Add controls around the unpaid edge so discovery does not become free compute.
Monitor unpaid traffic and failed retries from 4mica dashboard where available.
Free-trial abuse
Free trials are not payment guarantees. Treat them as marketing spend with strict limits.- cap trial value per wallet, account, IP, agent identity, or API key;
- expire credits quickly;
- require a funded payment path before high-cost trials;
- block repeated trial farming patterns;
- convert unknown agents to small paid trials when abuse appears.
Handle failure claims
When a buyer claims your agent failed, check three records:- payment record: did the buyer sign and did settlement succeed?
- delivery record: did your system return the promised response?
- product rule: did the result meet your published completion criteria?
Spend and request limits
Limit exposure per buyer or agent before traffic grows. Useful limits include maximum requests per minute, paid value per hour, concurrent tasks, downstream spend, task duration, and unpaid quote attempts. You can enforce limits by payer address, agent identity, account, domain, API key, guarantee, or IP depending on what your integration captures.Suspicious activity
Pause or reject payment flows when behavior no longer matches a normal buyer. Repeated invalid signatures, payment headers reused across routes or prices, mismatchedpayTo, amount, network, or asset, sudden spikes from a new payer, repeated failures after delivery, trial farming, refund farming, or unprofitable requests all deserve review.
Payment validation is necessary, but not the whole abuse system. Keep application-level policy close to the paid route.
For abuse patterns, send wallet, guarantee, route, and timestamp details to support.
Build confidence with collateral
4Mica’s credit model is backed by payer collateral. You should still choose when extra deposits or prepayment are appropriate.
For small deterministic requests, a valid payment guarantee may be enough.
Risk checklist
Before launch, make sure your risk controls match the cost of your routes.- verify and settle before paid work
- rate limit unpaid and invalid requests
- cap buyer spend and concurrency
- keep free trials narrow
- log every paid request and response
- define refund rules before launch
- monitor clearing, payment, and finality deadlines
- block suspicious payers quickly